Turning Cloud Zeros to Cloud Heros!! Cloud Identity Detection & Response
External link for Permiso Security
Palo Alto, CA, US
We’ve made some updates to #YetiHunter
❄️ YetiHunter Update Alert! ❄️ We are thrilled to announce a major update for YetiHunter. We've integrated numerous queries from Mandiant (part of Google Cloud)'s latest #Snowflake Threat Hunting Guide, bringing the total to 41 queries designed to help you identify and hunt down threat actors compromising your Snowflake account. 🛡️☃️ Check out the updated tool and all the details in the comments below! 👇 #Snowflake #ThreatDetection #YetiHunter
Thanks for covering #YetiHunter in tl;dr sec, Clint Gibler. We appreciate you sharing it with the security community.
Sharing the latest cybersecurity research at tldrsec.com | Head of Security Research at Semgrep
📚 tl;dr sec 236 Interview Questions, Securing Your Snowflake, Red Teaming LLMs ✨ Highlights 👩💼 Career 👩💼 - Consistently Prepared: Year-round strategies for career growth - Leif Dreizler - Demystifying the Process: Threat Detection Engineering Interviews - Julie Agnes Sparks - 6 Questions to Ask When Interviewing for an AppSec Role - PentesterLab ☁ Cloud Security ☁ - CLI Tool to Prevent Execution of Malicious Terraform Providers - Building to Prevent Subdomain Takeovers - Rami McCarthy 📦 Container Security 📦 - Netfetch: Scan Kubernetes Clusters for Pods Missing Network Policies - Daniel Riisnæs Dagfinrud - Attackers deploying new tactics in campaign targeting exposed Docker APIs - Matt Muir ⛓ Supply Chain ⛓ - What’s in the SOSS? Podcast - Omkhar Arasaratnam, Christopher Robinson - Hijacking GitHub runners to compromise the organization - ☀️ Hugo Vincent - Malicious VS Code Extensions - Amit Assaraf 🛡 Blue Team 🛡 - YetiHunter: An OSS tool to detect & hunt for suspicious activity in Snowflake - Bleon P. - UNC5537 Targets Snowflake Customer Instances for Data Theft and Extortion - Mandiant (part of Google Cloud) - Mapping Snowflake’s Access Landscape - Jared Atkinson 😈 Red Team 😈 - Slides and Code from 'Red Team Infrastructure Automation' Workshop - Stepping Stones - A Red Team Activity Hub - Stephen Tomkinson 🤖 AI + Security 🤖 - Haize Labs: automatically red team and stress test LLMs - An Agentic LLM vulnerability scanner. - PCC: Bold step forward, not without flaws - Adelin T. - Understanding Apple’s On-Device and Server Foundation Models release - Artem Dinaburg - CISA, JCDC, Government and Industry Partners Conduct AI Tabletop Exercise - H/T Chris Hughes - Keeping GenAI technologies secure is a shared responsibility - Saoud Khalifah https://lnkd.in/g9RZQh_B #cybersecurity #security #infosec #ciso #ai
We're going live with Jason Chan in less than an hour. The current over/under on number of dad jokes is 2. https://lnkd.in/eQiwkjSE
📣 We are excited to announce the launch of Cloud Tales - a limited series that shares the stories and journeys of industry cloud heroes each month. Our first guest is none other than Jason Chan! No slides, no agenda - just security practitioners and leaders alike sharing tales of their conquests and challenges in their journey to securing their cloud environments. Join us next Thursday, June 20th at 1pm ET / 10am PT where Jason will be joined by Permiso Co-founders and Co-CEOs Jason Martin and Paul Nguyen. https://lnkd.in/eQiwkjSE
Thanks to everyone at fwd:cloudsec who joined us for our event last night. We really appreciate it.
Join us this Thursday for our first episode of Cloud Tales! We're sitting down to chat with cloud heroes to discuss their journey to securing their cloud environments and all of the challenges along the way. Our first guest will be Jason Chan. Join us Thursday at 1pm ET / 10am PT to hear some stories of his career progression, his time at Netflix and more! He will be joined by Jason Martin and Paul Nguyen! https://lnkd.in/eQiwkjSE
Thank you, Catalin Cimpanu, for mentioning #YetiHunter in the recent issue of the Risky Biz newsletter! https://lnkd.in/epN59AtR
Ian Ahl takes the stage in about an hour at fwd:cloudsec! He'll be talking about some of the lesser known TTPs #ScatteredSpider and will be incorporating some fun activities to get the audience involved. Check it out! https://lnkd.in/eDeBWpRE
The one and only Nathan E. LIVE! https://lnkd.in/g2UXJ93k
Thanks for highlighting #YetiHunter, Clint Gibler !
Sharing the latest cybersecurity research at tldrsec.com | Head of Security Research at Semgrep
🛠 New tool: YetiHunter: An open-source tool to detect and hunt for suspicious activity in Snowflake. Leverages indicators from Snowflake, Mandiant, Datadog, and Permiso Includes queries to identify unauthorized access, data exfiltration attempts, and more. By Permiso Security's Bleon P. et al https://lnkd.in/gkxXkD3Y
We are LIVE at fwd:cloudsec! ✅ Permiso cover your *aaS t-shirts ✅ Permiso Survivors, our video game, is back! ✅ Pinball, Pool and Pints with Permiso tonight at 8pm at Carpool. Paul Nguyen, Silvio P., Danielle M. Gagnon, Ian Ahl, Daniel Bohannon, Andrew Kraut, Sanjeev Williams, Nathan E. and Jared Elder will be there! Nathan E. hits the stage today at 4:20pm. Let's go!